This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa
File:                     FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (raw, json)
Hash identifier:          dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=
Subject key identifier:   15:C5:D4:7A:DB:02:D3:EE:9B:BF:9E:19:D6:59:87:A2:A2:8C:77:13
Certificate issuer:       /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial:       019B76EBA54D7C88D50C3FC9FB7D19EF535D
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa
Signing time:             Thu 01 Jan 2026 00:18:33 +0000
ROA not before:           Thu 01 Jan 2026 00:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214678
IP address blocks:        45.148.74.0/24 maxlen: 24
                          45.148.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a5:4d:7c:88:d5:0c:3f:c9:fb:7d:19:ef:53:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
        Validity
            Not Before: Jan  1 00:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15c5d47adb02d3ee9bbf9e19d65987a2a28c7713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:f0:68:b2:91:f7:9a:e4:6b:2b:72:04:96:
                    a0:48:83:23:0a:95:24:c8:14:ce:9d:72:6f:98:4a:
                    d0:41:24:ae:db:9f:cb:29:2f:89:f8:e5:34:1c:f5:
                    39:5a:78:02:3f:48:d6:55:a4:e6:c5:79:02:da:ed:
                    0b:7e:9e:b0:0a:2d:17:82:ed:67:04:cc:5f:fe:55:
                    fa:a8:46:23:88:9e:39:a0:2d:e0:69:ac:df:a7:a5:
                    e0:ec:df:f5:6a:fe:41:89:a1:e9:7d:4c:fe:3b:1f:
                    cc:4d:50:33:47:bc:93:e9:a0:a3:68:d8:19:7d:dc:
                    0f:3d:34:43:c5:49:72:cd:be:48:46:a2:48:19:72:
                    ed:25:6d:76:2d:d0:35:07:49:70:46:44:85:ce:51:
                    75:9a:10:35:29:74:11:28:d7:10:a0:8a:7b:50:70:
                    1b:fb:53:af:f9:8f:3e:01:8b:66:8c:c0:f6:c3:4b:
                    e8:00:24:af:85:4d:6a:02:1f:a3:80:ef:14:fa:2d:
                    14:e7:45:ca:23:a0:4d:59:48:c9:fa:92:2d:a6:30:
                    4d:ec:fe:0f:76:6d:4e:5a:98:e7:36:25:9a:54:92:
                    54:d1:9c:24:13:ea:57:2c:3a:57:8d:da:40:14:e4:
                    17:da:8b:8e:78:05:81:ca:91:6e:40:c9:ce:99:17:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:D4:7A:DB:02:D3:EE:9B:BF:9E:19:D6:59:87:A2:A2:8C:77:13
            X509v3 Authority Key Identifier:
                keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:af:f0:77:58:3e:ee:32:3a:2e:6b:3f:af:6c:25:30:8b:
         89:a4:8c:4d:6c:e1:83:1a:1b:c8:3e:fd:83:03:82:86:c3:b5:
         5e:ef:f2:f9:67:fb:24:e4:fe:6b:bd:c0:ee:73:b6:ca:98:15:
         6e:f1:c6:b6:d1:36:6c:92:a4:2c:ca:ea:45:3b:4d:2c:6a:73:
         e3:8a:e1:d4:05:84:85:5b:d6:63:dc:d2:be:96:16:94:62:b8:
         5d:75:d8:23:0a:14:00:73:5f:4c:63:fe:34:65:ee:53:59:6c:
         1b:2e:0a:44:d0:7a:7f:74:17:b9:b9:44:44:38:58:57:de:25:
         69:31:b9:44:b4:36:17:65:b4:d5:31:5a:5c:c0:2f:e0:20:6b:
         92:cd:1e:cb:7b:c9:02:8d:89:fd:53:d6:a7:ff:e2:4b:00:df:
         59:04:cc:c9:02:67:ff:55:17:0c:76:01:ae:65:0a:f9:a6:16:
         c6:29:66:94:63:d0:1d:de:11:d8:7d:9f:d8:7f:8a:3e:09:a8:
         f5:ee:c9:5f:d0:e8:95:a0:63:f8:23:01:4c:68:a0:95:bd:2e:
         6f:f5:d4:a4:3a:b2:5b:20:66:fb:46:8a:89:1d:85:a4:42:92:
         10:29:aa:04:ab:f7:2e:96:0f:11:34:4b:8d:ca:54:c0:f4:b3:
         81:2c:4d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt266VNfIjVDD/J+30Z71NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWM1ZDQ3YWRiMDJkM2VlOWJiZjllMTlkNjU5ODdhMmEyOGM3NzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHwaLKR95rkaytyBJagSIMjCpUk
yBTOnXJvmErQQSSu25/LKS+J+OU0HPU5WngCP0jWVaTmxXkC2u0Lfp6wCi0Xgu1n
BMxf/lX6qEYjiJ45oC3gaazfp6Xg7N/1av5BiaHpfUz+Ox/MTVAzR7yT6aCjaNgZ
fdwPPTRDxUlyzb5IRqJIGXLtJW12LdA1B0lwRkSFzlF1mhA1KXQRKNcQoIp7UHAb
+1Ov+Y8+AYtmjMD2w0voACSvhU1qAh+jgO8U+i0U50XKI6BNWUjJ+pItpjBN7P4P
dm1OWpjnNiWaVJJU0ZwkE+pXLDpXjdpAFOQX2ouOeAWBypFuQMnOmRfVJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXF1HrbAtPum7+eGdZZh6KijHcTMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEvRmNYVWV0c0MwLTZidjU0WjFsbUhvcUtNZHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZRKMA0G
CSqGSIb3DQEBCwUAA4IBAQB49q/wd1g+7jI6Lms/r2wlMIuJpIxNbOGDGhvIPv2D
A4KGw7Ve7/L5Z/sk5P5rvcDuc7bKmBVu8ca20TZskqQsyupFO00sanPjiuHUBYSF
W9Zj3NK+lhaUYrhdddgjChQAc19MY/40Ze5TWWwbLgpE0Hp/dBe5uUREOFhX3iVp
MblEtDYXZbTVMVpcwC/gIGuSzR7Le8kCjYn9U9an/+JLAN9ZBMzJAmf/VRcMdgGu
ZQr5phbGKWaUY9Ad3hHYfZ/Yf4o+Caj17slf0OiVoGP4IwFMaKCVvS5v9dSkOrJb
IGb7RoqJHYWkQpIQKaoEq/culg8RNEuNylTA9LOBLE0A
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:22 2026 by rpki-client